Postgresql user setup

db_setup.sql

-- As postgres user:
CREATE DATABASE <DB_NAME>;
CREATE USER <USERNAME> WITH LOGIN ENCRYPTED PASSWORD '<PASSWORD>';
GRANT ALL PRIVILEGES ON DATABASE <DB_NAME> TO <USERNAME>;
ALTER DATABASE <DB_NAME> OWNER TO <USERNAME>;


-- grant read-only
GRANT CONNECT ON DATABASE <DB_NAME> TO <USERNAME>;
GRANT USAGE ON SCHEMA public TO <USERNAME>;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO <USERNAME>;

ALTER DEFAULT PRIVILEGES IN SCHEMA public
GRANT SELECT ON TABLES TO <USERNAME>;